Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
File: 1A0FC4695466F0034FDC7BD35D97BF935042446D.mft (raw, json)
Hash identifier: P3U0cz/YI3QjH1qCdQJGkO+kU6zp7/wFzvr50KorF4I=
Subject key identifier: 86:D9:54:F6:88:45:AE:1B:09:E3:13:BC:4C:D7:4D:A0:17:76:01:1B
Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D
Certificate issuer: /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D
Certificate serial: 20BEEB8A00967553CC08B262036CB3F131BE848A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
Manifest number: 04A3
Signing time: Thu 30 Jan 2025 07:11:56 +0000
Manifest this update: Thu 30 Jan 2025 07:06:56 +0000
Manifest next update: Sun 02 Feb 2025 17:46:56 +0000
Files and hashes: 1: 1A0FC4695466F0034FDC7BD35D97BF935042446D.crl (hash: xDjG5tZ58clYAYaIVduN/8rIfaT5kRwFqkRHbXXb1h8=)
2: 3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (hash: uhFXD5HucnvLa577o/lzdkI4bHtpnmfQ2EHjnkZ6ZlU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:be:eb:8a:00:96:75:53:cc:08:b2:62:03:6c:b3:f1:31:be:84:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D
Validity
Not Before: Jan 30 07:06:56 2025 GMT
Not After : Feb 2 17:46:56 2025 GMT
Subject: CN=86D954F68845AE1B09E313BC4CD74DA01776011B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:c4:5b:25:78:ad:a6:1a:87:13:ed:c8:09:
be:fc:20:78:37:25:a1:92:34:40:c2:25:28:f9:99:
5b:0a:64:8b:0c:5c:32:98:a4:dc:b6:20:22:0b:af:
3a:ab:cb:09:92:82:e0:6e:ff:30:11:12:74:35:31:
70:82:18:50:23:93:b0:e3:08:d0:24:de:49:11:f5:
e2:4a:83:d4:c8:8d:02:3d:59:a4:96:ff:ce:71:07:
2a:cc:54:ae:8c:f8:22:ba:b8:31:81:d7:ab:70:fd:
64:10:b5:8e:b3:4b:25:f0:b3:50:14:07:bf:d0:45:
63:ee:ae:a3:fb:86:5d:59:a3:d7:ed:d3:f0:18:22:
94:f7:fe:fb:f3:1a:39:75:37:d6:e3:ab:bd:c6:5f:
be:25:08:bc:f9:56:89:62:43:ce:3f:61:cc:de:8e:
1a:d8:8f:e4:00:5e:31:ab:52:1e:93:79:a9:49:31:
99:c8:3c:0c:14:78:26:5b:12:88:dc:2f:66:94:7c:
3d:cc:b3:e0:bc:2b:8b:c7:dd:4a:5a:d7:80:93:cb:
dd:a7:0a:b3:30:98:41:b9:0a:d1:1b:6a:b4:4a:e7:
4c:df:26:43:e8:60:0b:8a:50:ce:b3:bd:e0:2e:71:
f2:68:c9:af:f8:47:84:1f:68:6c:94:a5:05:95:2c:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:54:F6:88:45:AE:1B:09:E3:13:BC:4C:D7:4D:A0:17:76:01:1B
X509v3 Authority Key Identifier:
keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:89:3a:a9:89:b0:01:35:54:69:a9:0f:41:67:41:e4:32:b0:
98:0e:9e:9c:1d:4e:90:1b:d2:7e:e5:ab:02:f1:66:6c:b5:3e:
06:96:5b:a0:8b:df:2a:4d:17:f5:1c:f7:e1:bf:38:f5:eb:79:
32:8c:1c:08:de:09:24:74:bd:61:d7:e9:0a:62:7c:4b:e4:61:
85:f5:63:8c:d2:21:1a:ba:0a:88:41:87:d9:1e:b6:17:61:ff:
5a:60:4e:5f:d5:8e:00:f5:de:8e:0c:73:c2:fc:ae:44:c0:6f:
08:fb:7f:d5:8e:c8:44:96:0a:b7:70:bb:0f:23:1e:bc:2d:76:
c2:fb:b0:97:36:2d:16:c6:ef:45:e1:b2:fa:8f:33:b6:a0:b8:
2e:65:59:4c:95:d4:a1:75:69:1c:56:9e:aa:f1:64:f7:ce:aa:
5e:90:bc:42:c2:41:c9:16:d0:9a:1f:a5:09:b8:b4:d3:ef:21:
c8:9c:72:f4:ea:fa:91:8c:ea:1a:94:0f:64:1d:6a:c8:78:05:
5c:e9:5d:e4:8a:13:14:65:2c:3d:f5:ff:5f:98:e5:44:0b:f2:
8c:41:04:8b:c1:b3:e2:14:f0:42:09:b1:ba:29:2d:f4:01:7b:
dc:46:43:20:c8:1f:fa:ca:72:f9:81:7e:f6:19:33:eb:b3:bd:
bb:26:b5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:59 2025 by rpki-client